Mike Meyers' CompTIA Security+ Certification Guide (Exam SY0-401)

MODULE 25

Web Application Threats

Now that we’ve addressed some specific threats that apply to hosts, let’s look at specific threats from web applications. Note that these are still threats that apply to hosts; they can affect the security of the host as well as the security of the data that web applications access. However, we’ve categorized these a bit differently here, because web application threats can target very specific things on a host and cause some very particular issues. Most web application threats may seem to affect only the browser or any applications that are accessing web-based resources, but this isn’t always the case. In this module, we’ll look at some of these web application threats and how they affect the hosts, as well ...